Data center WAN aggregation to optimize hybrid cloud connectivity

1. A method of optimizing connectivity between data centers in a hybrid cloud system having a first data center managed by a first organization and a second data center managed by a second organization, the first organization being a tenant in the second data center, the method, comprising:

using a gateway of the first data center, probing a wide area network (WAN) with test packets between the gateway of the first data center to another gateway of the second data center through communication nodes of the WAN that are managed by at least one third-party service provider with respect to the first and second organizations by varying an Internet Protocol (IP) flow tuple of the test packets across a set of IP flows, wherein at least one route-based traffic management scheme is implemented for the WAN by the at least one third-party service provider to control traffic flow through at least some of the communication nodes of the WAN, wherein neither the first organization nor the second organization has control over the at least some of the communication nodes of the WAN, and wherein varying the IP flow tuple of the test packets across the set of IP flows comprises varying source and destination port numbers of the test packets to cause a plurality of paths to form within the WAN as a result of the at least one route-based traffic management scheme;

using the gateway of the first data center, identifying the paths through the communication nodes of the WAN between the gateway of the first data center and the another gateway of the second data center associated with the set of IP flows;

using the gateway of the first data center, classifying each IP flow in the set of IP flows based on performance calculated by combining at least latency and data rate associated with one or more of the plurality of paths;

using the gateway of the first data center, mapping a plurality of policies to the set of IP flows based on calculated performance of each of the set of IP flows, wherein the policies are automatically assigned to different types of application traffic by the gateway of the first data center, wherein each of the policies specifies one or more constraints to be met before an application traffic is assigned that policy, wherein the one or more constraints are based on application traffic type and time of day;

using the gateway of the first data center, selecting an IP flow from the set of IP flows for the application such that the performance of the selected IP flow that is calculated from at least the latency and the data rate associated with the one or more of the plurality of paths satisfies the application-specific performance requirements of the application; and

using the gateway of the first data center, establishing a path-optimized connection between the gateway and the other gateway through at least one of the communication nodes of the WAN having the selected IP flow for use by the application.

2. The method of claim 1 , wherein the WAN includes a public Internet having networks of a plurality of service providers.

3. The method of claim 2 , wherein at least one of the networks is configured with at least one traffic management scheme.

4. The method of claim 1 , wherein the step of selecting the IP flow comprises:

receiving a policy of the plurality of policies designated for the application;

wherein the selected IP flow is mapped to the received policy.

5. The method of claim 1 , wherein the step of establishing the path-optimized connection comprises:

establishing a secure channel between the gateway and the other gateway;

encapsulating application packets from the application within path-optimized packets according to the selected IP flow; and

encrypting the path-optimized packets for transmission over the secure channel.

6. The method of claim 5 , wherein the step of establishing the secure channel comprises sending an IP flow tuple for the selected IP flow from the gateway to the other gateway.

7. The method of claim 5 , wherein the step of establishing the path-optimized connection comprises:

receiving path-optimized packets from the other gateway over the secure channel;

decrypting the received path-optimized packets; and

decapsulating the received path-optimized packets based on the selected IP flow.

8. A computer system, comprising:

a virtualized computing system; and

a gateway coupled between the virtualized computing system and a wide area network (WAN), the gateway configured to:

probe the WAN with test packets between the gateway of a first data center managed by a first organization to another gateway of a second data center managed by a second organization through communication nodes of the WAN that are managed by at least one third-party service provider with respect to the computer system by varying an internet protocol (IP) flow tuple of the test packets across a set of IP flows, wherein at least one route-based traffic management scheme is implemented for the WAN by the at least one third-party service provider to control traffic flow through at least some of the communication nodes of the WAN, wherein neither the first organization nor the second organization has control over the at least some of the communication nodes of the WAN, and wherein varying the IP flow tuple of the test packets across the set of IP flows comprises varying source and destination port numbers of the test packets to cause a plurality of paths to form within the WAN as a result of the at least one route-based traffic management scheme;

identify the paths through the communication nodes of the WAN between the gateway and the another gateway associated with the set of IP flows;

classify each IP flow in the set of IP flows based on performance calculated by combining at least latency and data rate associated with one or more of the plurality of paths;

map a plurality of policies to the set of IP flows based on calculated performance of each of the set of IP flows, wherein the policies are automatically assigned to different types of application traffic by the gateway of the first data center, wherein each of the policies specifies one or more constraints to be met before an application traffic is assigned that policy, wherein the one or more constraints are based on application traffic type and time of day;

select an IP flow from the set of IP flows for the application such that the performance of the selected IP flow that is calculated from at least the latency and the data rate associated with the one or more of the plurality of paths satisfies the application-specific performance requirements of the application; and

establish a path-optimized connection between the gateway and the other gateway through at least one of the communication nodes of the WAN having the selected IP flow for use by the application.

9. The computer system of claim 8 , wherein the WAN includes a public Internet having networks of a plurality of service providers.

10. The computer system of claim 9 , wherein at least one of the networks is configured with at least one traffic management scheme.

11. The computer system of claim 8 , wherein the gateway is configured to:

receive a policy of the plurality of policies designated for the application;

wherein the selected IP flow is mapped to the received policy.

12. The computer system of claim 8 , wherein the gateway is configured to:

establish a secure channel to the other gateway;

encapsulate application packets from the application within path-optimized packets according to the selected IP flow; and

encrypt the path-optimized packets for transmission over the secure channel.

13. A non-transitory computer readable medium comprising instructions, which when executed in a computer system, causes the computer system to carry out a method of optimizing connectivity between data centers in a hybrid cloud system having a first data center managed by a first organization and a second data center managed by a second organization, the first organization being a tenant in the second data center, the method comprising:

using a gateway of the first data center, probing a wide area network (WAN) with test packets between the gateway of the first data center to another gateway of the second data center through communication nodes of the WAN that are managed by at least one third-party service provider with respect to the first and second organizations by varying an Internet Protocol (IP) flow tuple of the test packets across a set of IP flows, wherein at least one route-based traffic management scheme is implemented for the WAN by the at least one third-party service provider to control traffic flow through at least some of the communication nodes of the WAN, wherein neither the first organization nor the second organization has control over the at least some of the communication nodes of the WAN, and wherein varying the IP flow tuple of the test packets across the set of IP flows comprises varying source and destination port numbers of the test packets to cause a plurality of paths to form within the WAN as a result of the at least one route-based traffic management scheme;

using the gateway of the first data center, identifying the paths through the communication nodes of the WAN between the gateway of the first data center and the another gateway of the second data center associated with the set of IP flows;

using the gateway of the first data center, classifying each IP flow in the set of IP flows based on performance calculated by combining at least latency and data rate associated with one or more of the plurality of paths;

using the gateway of the first data center, mapping a plurality of policies to the set of IP flows based on calculated performance of each of the set of IP flows, wherein the policies are automatically assigned to different types of application traffic by the gateway of the first data center, wherein each of the policies specifies one or more constraints to be met before an application traffic is assigned that policy, wherein the one or more constraints are based on application traffic type and time of day;

using the gateway of the first data center, selecting an IP flow from the set of IP flows for the application such that the performance of the selected IP flow that is calculated from at least the latency and the data rate associated with the one or more of the plurality of paths satisfies the application-specific performance requirements of the application; and

using the gateway of the first data center, establishing a path-optimized connection between the gateway and the other gateway through at least one of the communication nodes of the WAN having the selected IP flow for use by the application.

14. The method of claim 1 , wherein the at least one traffic management scheme implemented by the at least one third-party service provider comprises a content-based traffic management scheme that manages the traffic flow according to different applications that generate the traffic flow.